Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File:                     KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier:          V6zJ7tZHE42Xx2jbfpw0hBqDs8iAkGmQcEdUNqo85t8=
Subject key identifier:   A7:79:66:00:5D:88:7F:22:75:1D:C2:F3:01:3D:7A:B2:03:CF:BA:5A
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer:       /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial:       01962E6202874A3A116AF8258BBBAC670C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number:          02F0
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: 6cnyivbO2yYLy//xgN5noiJFb33Sja+RjQu9Ceo7v10=)
                          2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:02:87:4a:3a:11:6a:f8:25:8b:bb:ac:67:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=a77966005d887f22751dc2f3013d7ab203cfba5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:ec:08:a4:4c:3c:bb:e8:f2:b1:61:2a:2b:
                    96:6b:6f:fb:f5:a7:3e:39:0f:7f:a8:11:e4:d4:9b:
                    29:1d:57:a0:60:d9:0b:5e:34:2a:7f:77:4f:7b:2a:
                    07:65:ef:8f:06:ef:26:20:4d:93:56:bd:01:7b:84:
                    26:82:49:68:18:cb:33:fa:d9:4f:4e:81:2c:66:3b:
                    34:25:a2:a3:92:1d:4d:da:52:1a:10:6c:e6:fe:d1:
                    20:ba:6e:3a:67:71:bb:8e:06:63:50:6c:bc:42:a7:
                    65:f9:75:6e:1e:7a:42:10:38:75:2a:20:d6:28:39:
                    fc:42:a0:f9:5a:02:fb:99:7b:06:2e:3a:89:b5:45:
                    ea:c0:99:ff:8b:bf:c4:64:14:f9:5d:2c:fa:e3:e9:
                    08:e7:b9:63:4e:61:c3:68:a6:2f:a6:3d:1e:22:29:
                    19:52:98:7a:4f:a1:d7:38:35:ea:ba:71:56:2c:9d:
                    5b:e0:43:cc:9e:d4:3a:ef:25:68:7d:ca:70:70:c6:
                    80:bb:91:4f:ee:ea:62:5b:e8:8a:19:70:08:fb:d5:
                    30:6c:88:f2:a6:1c:18:8d:44:e0:46:39:67:a8:27:
                    77:1f:3b:74:df:ce:ac:75:c1:c1:29:9b:62:41:e8:
                    35:d0:f2:02:5f:a5:e6:6e:d7:41:32:68:13:41:18:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:79:66:00:5D:88:7F:22:75:1D:C2:F3:01:3D:7A:B2:03:CF:BA:5A
            X509v3 Authority Key Identifier:
                keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:ec:52:c5:7c:e1:d3:7c:56:77:8a:14:d4:f3:9d:57:c1:
         c6:a8:e2:8e:88:15:ad:3c:d1:8f:41:99:2a:69:8c:e2:5a:8f:
         51:47:ed:5f:85:16:e5:b2:9e:bc:a8:44:b6:01:c8:60:f9:45:
         6c:65:05:39:f1:f9:1e:cb:4c:31:b0:e9:a3:3e:23:66:50:c0:
         dc:6f:13:ad:bb:93:7a:e9:d4:dd:a1:ec:d8:a1:2d:1e:33:74:
         74:c8:4a:fe:ff:89:fe:f2:08:e7:83:24:68:38:0d:5d:38:c7:
         bb:d9:64:5f:41:63:77:d2:07:f7:0e:45:65:ba:8c:60:89:c9:
         dd:63:e2:fa:54:14:35:40:17:f2:4a:5c:cb:98:0a:af:d7:38:
         36:89:d5:f4:44:d5:9f:78:63:a8:79:5e:57:c0:59:44:aa:e3:
         b7:64:d8:a3:1d:ad:8e:9e:72:85:3f:2f:89:25:e7:15:ea:a4:
         c2:2a:d0:3b:b3:70:b7:a3:0d:8c:9b:5c:a2:8d:4b:e8:0e:97:
         35:59:6b:29:11:9e:3b:ea:79:24:6a:62:f5:a7:13:48:61:15:
         b4:2c:a0:12:7e:31:0b:fc:8e:7a:51:05:f6:77:48:98:a2:75:
         e4:1e:6f:43:77:06:a6:d5:0c:7b:33:cf:42:a2:d7:ac:7b:5b:
         93:a3:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----